Authenticate with session cookie